AI & Enterprise
Cursor malicious Claude Code extension incident traced to FireworksAI hack
The incident in which a malicious Claude Code extension was distributed on the Cursor marketplace began with an access key leaked in a FireworksAI hack, The Hacker News reported on Nov. 15. The attacker used the key to copy data from a read-only repository used for sharing data between Cursor and FireworksAI. The repository included some coding agent logs from sessions without privacy mode, and some undeleted credentials led to exposure of API credentials for some customers.
